the switch for end users Cat 9300
version 16.12
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service call-home
platform punt-keepalive disable-kernel-core
!
hostname B-SW10
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
no aaa new-model
switch 1 provision c9300l-48p-4x
!
!
destination transport-method http
no destination transport-method email
ip routing
!
!
!
!
ip multicast-routing
!
!
!
login on-success log
!
!
!
!
!
!
!
no device-tracking logging theft
spanning-tree mode rapid-pvst
spanning-tree extend system-id
memory free low-watermark processor 134344
!
!
redundancy
mode sso
!
!
!
!
!
transceiver type all
monitoring
lldp run
!
!
class-map match-any system-cpp-police-ewlc-control
description EWLC Control
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, L2 LVX data packets, LOGGING, Transit Traffic
class-map match-any system-cpp-default
description EWLC Data, Inter FED Traffic
class-map match-any system-cpp-police-sys-data
description Openflow, Exception, EGR Exception, NFL Sampled Data, RPF Failed
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
description L2 LVX control packets
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-high-rate-app
description High Rate Applications
class-map match-any system-cpp-police-multicast
description MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
description Stackwise Virtual OOB
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control and Low Latency
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
class-map match-any system-cpp-police-dhcp-snooping
description DHCP snooping
class-map match-any system-cpp-police-ios-routing
description L2 control, Topology control, Routing control, Low Latency
class-map match-any system-cpp-police-system-critical
description System Critical and Gold Pkt
class-map match-any system-cpp-police-ios-feature
description ICMPGEN,BROADCAST,ICMP,L2LVXCntrl,ProtoSnoop,PuntWebauth,MCASTData,Transit,DOT1XAuth,Swfwd,LOGGING,L2LVXData,ForusTraffic,ForusARP,McastEndStn,Openflow,Exception,EGRExcption,NflSampled,RpfFailed
!
policy-map system-cpp-policy
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
ip address 10.1.2.1 255.255.255.0
negotiation auto
!
interface GigabitEthernet1/0/1
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/2
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
interface GigabitEthernet1/0/3
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/4
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/5
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/6
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/7
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/8
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/9
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/10
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/11
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/12
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/13
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/14
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/15
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/16
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/17
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/18
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/19
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/20
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/21
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/22
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/23
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/24
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/25
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
interface GigabitEthernet1/0/26
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/27
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/28
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/29
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/30
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/31
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/32
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/33
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/34
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/35
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/36
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/37
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/38
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/39
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/40
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/41
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/42
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/43
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/44
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/45
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/46
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/47
switchport access vlan 203
switchport mode access
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/48
switchport voice vlan 102
spanning-tree portfast
spanning-tree bpduguard enable
!
interface TenGigabitEthernet1/1/1
switchport trunk allowed vlan 1-108,110-4094
switchport mode trunk
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface AppGigabitEthernet1/0/1
!
interface Vlan1
no ip address
shutdown
!
interface Vlan3
ip address 10.10.3.10 255.255.255.0
!
interface Vlan52
ip address 10.10.52.10 255.255.255.0
!
interface Vlan203
no ip address
define interface-range SFP TenGigabitEthernet1/1/1 - 4
define interface-range AccessPorts GigabitEthernet1/0/1 - 48
!
ip default-gateway 10.10.52.1
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip route 0.0.0.0 0.0.0.0 10.10.52.1
!
!
!
!
!
!
control-plane
service-policy input system-cpp-policy
!
privilege interface level 2 shutdown
privilege configure level 2 interface
privilege exec level 2 write memory
privilege exec level 2 write
privilege exec level 2 configure terminal
privilege exec level 2 configure
banner motd ^C
line con 0
stopbits 1
line vty 0 4
login
line vty 5 15
login
!
!
!
!
!
!
!
end
the switch for routing inter-vlan Cat 9500
version 17.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
service call-home
platform punt-keepalive disable-kernel-core
!
hostname CORE-B
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
no aaa new-model
clock timezone GMT 1 0
switch 1 provision c9500-40x
!
!
!
!
!
!
!
!
!
ip dhcp excluded-address 10.10.203.1 10.10.203.10
ip dhcp excluded-address 10.10.204.1 10.10.204.10
!
ip dhcp pool users1-bt2
network 10.10.203.0 255.255.255.0
default-router 10.10.203.1
dns-server 8.8.8.8
lease 365
!
ip dhcp pool users2-bt2
network 10.10.204.0 255.255.255.0
default-router 10.10.204.1
dns-server 8.8.8.8
lease 365
!
!
!
login on-success log
!
!
!
!
!
!
!
no device-tracking logging theft
spanning-tree mode rapid-pvst
spanning-tree extend system-id
memory free low-watermark processor 133201
!
!
redundancy
mode sso
!
!
!
!
!
!
transceiver type all
monitoring
!
!
class-map match-any system-cpp-police-ewlc-control
description EWLC Control
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, L2 LVX data packets, LOGGING, Transit Traffic
class-map match-any system-cpp-default
description EWLC Data, Inter FED Traffic
class-map match-any system-cpp-police-sys-data
description Openflow, Exception, EGR Exception, NFL Sampled Data, RPF Failed
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
description L2 LVX control packets
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-high-rate-app
description High Rate Applications
class-map match-any system-cpp-police-multicast
description MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
description Stackwise Virtual OOB
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control and Low Latency
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
class-map match-any system-cpp-police-dhcp-snooping
description DHCP snooping
class-map match-any system-cpp-police-ios-routing
description L2 control, Topology control, Routing control, Low Latency
class-map match-any system-cpp-police-system-critical
description System Critical and Gold Pkt
class-map match-any system-cpp-police-ios-feature
description ICMPGEN,BROADCAST,ICMP,L2LVXCntrl,ProtoSnoop,PuntWebauth,MCASTData,Transit,DOT1XAuth,Swfwd,LOGGING,L2LVXData,ForusTraffic,ForusARP,McastEndStn,Openflow,Exception,EGRExcption,NflSampled,RpfFailed
!
policy-map system-cpp-policy
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
ip address 10.1.1.2 255.255.255.0
negotiation auto
!
interface TenGigabitEthernet1/0/1
switchport trunk allowed vlan 1-108,110-4094
switchport mode trunk
!
interface TenGigabitEthernet1/0/2
switchport trunk allowed vlan 1-108,110-4094
switchport mode trunk
!
interface TenGigabitEthernet1/0/3
!
interface TenGigabitEthernet1/0/4
!
interface TenGigabitEthernet1/0/5
!
interface TenGigabitEthernet1/0/6
!
interface TenGigabitEthernet1/0/7
!
interface TenGigabitEthernet1/0/8
!
interface TenGigabitEthernet1/0/9
!
interface TenGigabitEthernet1/0/10
!
interface TenGigabitEthernet1/0/11
!
interface TenGigabitEthernet1/0/12
!
interface TenGigabitEthernet1/0/13
!
interface TenGigabitEthernet1/0/14
!
interface TenGigabitEthernet1/0/15
interface TenGigabitEthernet1/0/16
!
interface TenGigabitEthernet1/0/17
!
interface TenGigabitEthernet1/0/18
!
interface TenGigabitEthernet1/0/19
!
interface TenGigabitEthernet1/0/20
!
interface TenGigabitEthernet1/0/21
!
interface TenGigabitEthernet1/0/22
!
interface TenGigabitEthernet1/0/23
!
interface TenGigabitEthernet1/0/24
!
interface TenGigabitEthernet1/0/25
!
interface TenGigabitEthernet1/0/26
!
interface TenGigabitEthernet1/0/27
!
interface TenGigabitEthernet1/0/28
!
interface TenGigabitEthernet1/0/29
!
interface TenGigabitEthernet1/0/30
!
interface TenGigabitEthernet1/0/31
!
interface TenGigabitEthernet1/0/32
!
interface TenGigabitEthernet1/0/33
!
interface TenGigabitEthernet1/0/34
!
interface TenGigabitEthernet1/0/35
!
interface TenGigabitEthernet1/0/36
!
interface TenGigabitEthernet1/0/37
!
interface TenGigabitEthernet1/0/38
interface TenGigabitEthernet1/0/39
!
interface TenGigabitEthernet1/0/40
description Link to Site data H1
no switchport
ip address 192.168.1.2 255.255.255.252
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/5
!
interface TenGigabitEthernet1/1/6
!
interface TenGigabitEthernet1/1/7
!
interface TenGigabitEthernet1/1/8
interface FortyGigabitEthernet1/1/1
!
interface FortyGigabitEthernet1/1/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan3
ip address 10.10.3.1 255.255.255.0
ip pim sparse-dense-mode
!
interface Vlan10
ip address 10.10.10.1 255.255.255.0
!
interface Vlan52
ip address 10.10.52.1 255.255.255.0
!
interface Vlan102
ip address 10.10.102.1 255.255.255.0
!
interface Vlan203
ip address 10.10.203.1 255.255.255.0
ip pim sparse-dense-mode
!
interface Vlan204
ip address 10.10.204.1 255.255.255.0
!
ip default-gateway 10.10.10.100
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip route 10.10.11.0 255.255.255.0 192.168.1.1
ip route 10.10.20.0 255.255.255.0 192.168.1.1
ip route 10.10.103.0 255.255.255.0 192.168.1.1
ip route 10.10.104.0 255.255.255.0 192.168.1.1
!
!
!
!
!
!
control-plane
service-policy input system-cpp-policy
line con 0
stopbits 1
line vty 0 4
login
transport input ssh
line vty 5 15
login
transport input ssh
destination transport-method http
!
!
!
!
!
!
end
